Modeling attackers on the Internet before and during attack execution

Napredne ustrajne prijetnje danas su veliki sigurnosni problem organizacijama. Da bi se organizacije uspješno obranile od takve vrste napadača potrebno je pratiti i detaljno analizirati njihovo djelovanje. U ovom radu opisana je tehnika modeliranje napadača koja može pomoći u praćenju djelovanja napadača na efikasan, efektivan i strukturiran način. Opisani su najpoznatiji modeli, te je dan primjer korištenja modela na primjerima napada koji su se dogodili u stvarnom svijetu. Također dan je pregled i evaluacija alata za emulaciju napadača koji se temelje na tim modelima te je prikazan rad s Caldera alatom. Na kraju je dan prijedlog mogućih daljnjih smjerova istraživanja.Advance persistent threats are a major cybersecurity problem for organizations. For successful defense against these attackers organizations need to analyze every action they made in detail. In this thesis technique called attack modeling is described to help organizations to effectively, efficiently and in structured manner represent actions that an attacker makes. Most famous and widely used models are described, and some models are used to describe famous attacks that happen in the real world. Also given is an overview and evaluation of tools used for attack emulation, that are based on previously described models, and in more depth is shown how to use Caldera tool. At the end possible further research directions are discussed